Submit
Path:
~
/
home
/
caratcollect
/
domains
/
24caratcollection.com
/
public_html
/
code
/
File Content:
invoicew.php
<?php include("../library.php"); echo $name=mysql_real_escape_string($_REQUEST['name']); $mobileNo=mysql_real_escape_string($_REQUEST['mobileNo']); $email=mysql_real_escape_string($_REQUEST['email']); $houseNo=mysql_real_escape_string($_REQUEST['houseNo']); $street=mysql_real_escape_string($_REQUEST['street']); $colony=mysql_real_escape_string($_REQUEST['colony']); $landmark=mysql_real_escape_string($_REQUEST['landmark']); $city=mysql_real_escape_string($_REQUEST['city']); $state=mysql_real_escape_string($_REQUEST['state']); $payment=mysql_real_escape_string($_REQUEST['payment']); $gstAmount=mysql_real_escape_string($_REQUEST['gstAmount']); $custId=$_SESSION['custIds']; $createdDate=date('Y-m-d'); $createdTime=date('H:i:s'); $result9=$mysql9->m_Query("select * from tblcustomer where id=$custId && houseNo=''"); if($mysql9->m_NumRows()>0) { echo $s="update tblcustomer set houseNo='$houseNo',street='$street',colony='$colony',landmark='$landmark',city='$city',state='$state' where id=$custId"; $result=$mysql8->m_Query($s); } $result=$mysql2->m_Query("select * from tbladdcart order by billingId desc"); if($mysql2->m_NumRows()==0) { $billingId=1; } else { $row2=$mysql2->m_FetchObject(); $billingId=$row2->billingId+1; } echo $billingId; $result=$mysql2->m_Query("select * from tblinvoice order by id desc"); if($mysql2->m_NumRows()==0) { $invoiceId=1; } else { $row2=$mysql2->m_FetchObject(); $invoiceId=$row2->invoiceId+1; } $billingId; $result=$mysql9->m_Query("select * from tblinvoice where billingId='$billingId'"); if($mysql9->m_NumRows()==0) { $total=0;$subtotal=0; $result=$mysql->m_Query("select * from tbltemporder where address='$ipAddress'"); while($row=$mysql->m_FetchObject()) { $productId=$row->productId; $qty=$row->qty; $price=$row->price; $totalAmount=$row->totalAmount; $productName=mysql_real_escape_string($row->productName); $result=$mysql3->m_Query("insert into tbladdcart(address,productId,qty,price,totalAmount,orderDate1,productName,custId,status,cartStatus,billingId,catId,pId) value('$ipAddress','$productId','$qty','$price','$totalAmount','$createdDate','$productName','$custId','Approved','Pending','$billingId','$row->catId','$row->pId')"); $subtotal=$subtotal+$row->price; $total=$total+$row->totalAmount; } $subtotal=$subtotal; $netAmount=$total; $result=$mysql8->m_Query("insert into tblinvoice(invoiceId,name,mobileNo,emailId,houseNo,street,colony,landmark,city,state,gst,gstAmount,subtotal,netAmount,createdDate,ipAddress,status,custId,payment,invoiceStatus,createdTime,billingId)value('$invoiceId','$name','$mobileNo','$email','$houseNo','$street','$colony','$landmark','$city','$state','0','$gstAmount','$subtotal','$netAmount','$createdDate','$ipAddress','Approved','$custId','$payment','Pending','$createdTime','$billingId')"); $result=$mysql4->m_Query("delete from tbltemporder where address='$ipAddress'"); header("location:../invoices.php?invoiceId=$invoiceId"); } ?>
Edit
Rename
Chmod
Delete
FILE
FOLDER
Name
Size
Permission
Action
delete.php
526 bytes
0644
invoice.php
3169 bytes
0644
invoicew.php
3091 bytes
0644
save_user.php
1534 bytes
0644
update_productDetails.php
502 bytes
0644
N4ST4R_ID | Naxtarrr